Re: prominent message on website about "use only on trusted input"?

Roberto José de Amorim via Lame-dev <[email protected]> Fri, 28 Jul 2017 12:15:41 +0000 (UTC)
Newsgroups gmane.comp.audio.mp3.lame
Message-ID <[email protected]>
Does anybody even use the frame analyzer anymore? It requires gtk1, for crying out  loud!
I agree with bringing the internal decoder up to current mpg123 version and keeping mpglib only for the analyzer
 -- 
Roberto José de AmorimMSc in Computer Science
Columbia University - New York



      De: Thomas Orgis <[email protected]>
 Para: [email protected] 
 Enviadas: Sexta-feira, 28 de Julho de 2017 9:09
 Assunto: Re: [Lame-dev] prominent message on website about "use only on trusted input"?
   
Am Fri, 28 Jul 2017 12:31:03 +0200
schrieb [email protected]: 

> Did we had reports on inputs not handled through the decoding library?

Barring any work to finally replace the mpglib, recommending use of
LAME with plain PCM/WAV only might be a sensible option.

Perhaps a quick intermediate step could be to replace the decoder part
of mpglib with libmpg123 bindings and keep the internal mpglib for the
frame analyzer tool? If such a change would be considered, I could be
motivated to prepare the patch. Then we only need a warning to use the
current version, please … denial of service of the analyzer seems less
of a public health issue.


Alrighty then,

Thomas
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Lame-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lame-dev


   
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Lame-dev mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/lame-dev